Privacy Policy

1. Who we are and what this covers

Candor AI LLC ("Candor AI," "we," "us") is a limited liability company based in Pomona, California. This Privacy Policy explains how we handle information in connection with our public marketing website, getcandorai.com (the "Site"), including the interactive demo and the chat on the Site, messages you send to our Instagram account, @getcandorai, and the page businesses use to connect an Instagram account to Candor AI.

This policy is about visitors to the Site. It is separate from the data we process on behalf of business clients who hire us to run an AI agent for their business — that processing is governed by the written agreement each client signs with us, including its Data Processing Agreement, not by this page.

2. Information we collect

Information you send us directly

Our contact form. The form on our contact page runs entirely inside your browser. It takes what you type — your name, your business name, what kind of business it is, your email, your phone number if you give one, which language you prefer, the boxes you check about what is taking up your time and what you are curious about, anything in the optional notes box, and whether you checked the box giving us permission to text you — and writes it into an email addressed to us, which then opens in your own email program. Nothing you type reaches us until you press Send there. If you close the page instead, we never see it. There is no account, no login, and nothing is saved on our side by the form itself. We ask you not to send sensitive personal information — no Social Security numbers, no financial account numbers, no health information. We do not build a profile on you and we do not add you to a marketing list.

If you choose to email us at hello@getcandorai.com (for example, from a "Get in touch" or sign-up link), we receive your email address and whatever you include in your message — such as your name, your business name, and details about your inquiry. We use this only to respond to you and to follow up about the services you asked about.

The interactive demo

The demo currently on the Site is a self-contained illustration that runs entirely in your browser. It follows a scripted conversation to show what a Candor AI agent is like. It does not send what you type to us or to anyone else, and it does not store your messages — as the demo itself states, nothing you type is saved. The chat window described below is a separate feature, and unlike this demo it does send what you type.

The chat on this Site

Separately from the demo above, this Site has a chat window that is a live, AI-powered assistant. Before it opens, you are shown a notice explaining that it is automated and that it replies only with answers Candor AI approved in advance. It will not accept a message until you click to start, and we record that you were shown the notice, which version of it you saw, and when.

When you send a message, the text you typed is sent to two providers so the assistant can find the right reply: Voyage AI turns your message into a numerical form used for matching, and Anthropic selects which of Candor AI's pre-approved answers fits it. Neither of them writes the reply. What you receive is always an answer Candor AI approved in advance, returned word for word. When nothing fits, the assistant says so instead of guessing.

We keep a server log of the conversation for a short period, including the text of your message, so we can see what the assistant was asked and where it fell short. When the assistant cannot answer, that message is also sent to Candor AI by email through Resend, our email provider, so that a person can follow up. Please do not send sensitive personal information through the chat.

Messages to our Instagram account

If you send a direct message to @getcandorai on Instagram, Instagram (which is run by Meta) delivers a notice of that message to our server, and the notice includes what you wrote. Our server does not save your message. It records only that a message arrived: an identifier Instagram assigns to you for our account (not your username), an identifier for the message, the time, whether it contained text, and whether it contained an attachment such as a picture or voice message. We never open, download or keep attachments sent to us on Instagram. They stay in your Instagram conversation, which Meta controls. We keep that record in a server log for a short period so we can confirm messages are arriving.

An automated assistant now answers Instagram messages. The first thing it sends you in a conversation is a notice that it is a bot and not a person, and it sends that notice again if a conversation has been quiet for a while, or after someone at Candor AI has replied by hand and the assistant takes over again.

When you send a message, the text you typed is sent to two providers so the assistant can find the right reply: Voyage AI turns your message into a numerical form used for matching, and Anthropic selects which of Candor AI's pre-approved answers fits it. Neither of them writes the reply. What you receive is always an answer Candor AI approved in advance, returned word for word. When nothing fits, the assistant says so instead of guessing, and your question is sent to Candor AI by email through Resend, our email provider, so that a person can follow up. Your Instagram username and the identifier Instagram assigns you are not included in that email.

So that the assistant knows whether it has already told you it is a bot, we keep the identifier Instagram assigns you for our account — not your username — together with the times it last messaged you and last told you it is a bot. We keep that for 30 days after your last message and then delete it. We still do not save the text of your Instagram messages. Please do not send sensitive personal information by direct message.

Instagram itself — your account, your messages as Instagram stores them, and what Meta does with them — is governed by Meta's own terms and privacy policy, not by this page.

Connecting an Instagram account

If a business connects its Instagram professional account to Candor AI at getcandorai.com/api/ig-connect, Instagram asks you to log in and approve two permissions. We then read the account's username and Instagram account ID and show them back to you. We keep the account ID, the username, which permissions were approved, when that access expires, and when the account was connected. We do not store your Instagram password or access token. You can stop Candor AI's access at any time by removing it in your Instagram settings (Settings → Apps and websites). To have this record deleted, ask us as described in section 8.

Text messages to our business number

If you text (909) 259-2050, our text-messaging provider, Twilio, delivers your message to our server, and an automated assistant answers it. The first reply tells you it is automated. Because your first text is how you start the conversation, we keep a record of it: your mobile number, the date you first texted us, the language you wrote in, which version of that notice we sent, and the date of any later request to stop.

The text you send is processed by Voyage AI and Anthropic so the assistant can find an approved answer, the same way as the chat on this Site. When nothing fits, your question is emailed to Candor AI through Resend, without your mobile number.

The assistant reads text only. If you send a picture, voice message or other attachment, we do not open it. We delete it from Twilio and reply asking you to type your question instead.

Messages to our WhatsApp number

If you message Candor AI on WhatsApp, WhatsApp (which is run by Meta) delivers your message through our messaging provider, Twilio, to our server, and an automated assistant answers it. The first reply tells you it is automated and how to reach a person. Because your first message is how you start the conversation, we keep a record of it: your WhatsApp phone number, the date you first wrote to us, the language you wrote in, which version of that notice we sent, and the date of any later request to stop. We do not keep your WhatsApp profile name or your WhatsApp ID.

The text you send is processed by Voyage AI and Anthropic so the assistant can find an approved answer, the same way as the chat on this Site. When nothing fits, your question is emailed to Candor AI through Resend, without your phone number.

The assistant reads text only. If you send a picture, voice message, document or other attachment, we do not open it. We delete it from Twilio and reply asking you to type your question instead.

To stop, reply STOP (or ALTO). We confirm once and then do not reply again unless you send START.

WhatsApp itself — your account, your messages as WhatsApp stores them, and what Meta does with them — is governed by Meta's own terms and privacy policy, not by this page. Please do not send card numbers, account numbers or ID numbers by WhatsApp.

Information collected automatically

The Site is configured to use Cloudflare Web Analytics, a privacy-focused analytics service that does not use cookies and does not track visitors across other websites. When enabled, it reports aggregate, non-identifying information such as which pages are viewed, the referring site, and general device and browser type. Our website host and content-delivery provider, Cloudflare, also automatically processes basic technical data (such as IP address) as needed to deliver and secure the Site. We display fonts served by Google Fonts, which means Google may receive your IP address when a page loads so the fonts can be delivered.

Cookies

The Site does not set cookies for advertising or cross-site tracking, and the analytics we use is cookieless.

3. How we use information

We use the information described above to respond to your inquiries and provide the information or services you request; to operate, maintain, secure, and improve the Site; to understand, in aggregate, how the Site is used; and to comply with our legal obligations. We do not use it to make automated decisions about you, and we do not sell it.

4. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose information only in these limited ways:

Service providers. We use a small number of vendors to run the Site, and they may process information on our behalf: Cloudflare (website hosting, content delivery, and privacy-focused analytics), Google (Google Workspace for the email you send us, and Google Fonts), Anthropic and Voyage AI (the AI providers behind the chat on this Site, described in section 2), Twilio (text messaging and WhatsApp messages to and from our business number), and Resend (email delivery, used when the chat, a text message, a WhatsApp message or an Instagram message hands a question to a person).

Legal reasons. We may disclose information if required by law, or to protect the rights, safety, or property of Candor AI, our visitors, or others.

The separate AI agent services we provide to business clients rely on additional sub-processors. Those relate to client services, not to your use of this Site, and the current list is set out in the Data Processing Agreement included with the client agreement.

Text messages. If you text our business number, (909) 259-2050, we use your mobile number only to reply to you. When the assistant cannot answer your text, the question you asked is sent to Candor AI by email through Resend, our email provider, so that a person can follow up. Your mobile number is not included in that email. No mobile information or text-messaging opt-in consent will be shared with third parties or affiliates for marketing or promotional purposes, and neither is sold or bought. Message frequency varies — you receive a reply only when you send us a message. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help.

Instagram. Messages you send to @getcandorai travel through Instagram, which is run by Meta, before they reach us. The text you send is processed by Voyage AI and Anthropic so the assistant can find an approved answer, and, when it has none, your question is emailed to Candor AI through Resend — the same three providers described in section 2. We do not share your Instagram messages with anyone else, and we do not use them for advertising.

5. "Do Not Track" and cross-site tracking

Some browsers can send a "Do Not Track" (DNT) signal. There is no common industry standard for how to respond to it, and the Site does not currently respond to DNT signals. We do not track you over time and across third-party websites, and we do not allow third parties to collect personally identifiable information about your activity across different sites through the Site.

6. How long we keep information

We keep the emails you send us for as long as needed to handle your inquiry and any resulting relationship, and then delete them within a reasonable period unless we are required to keep them longer. Analytics information is aggregate and non-identifying. (Retention of data handled for business clients — for example, message content and consent records for a live agent — is governed by the client agreement and its Data Processing Agreement, not by this page.)

When a question from the chat, a text message or a WhatsApp message is emailed to us because the assistant could not answer it, we delete that email within 90 days.

If you check the box giving us permission to text you, we keep the record of that permission — the exact wording you agreed to and the date you agreed to it — and the record of any later request to stop. We keep those for five years after the last message we send to your number. Telemarketing rules require us to be able to prove both, and a permission we cannot prove is worth nothing to either of us.

If you start a conversation by texting us, we keep the record described in section 2 so we can show when you contacted us and when you asked us to stop. We delete it if you ask us to, except the record of a request to stop, which we keep so that your request stays honored.

If you start a conversation by messaging us on WhatsApp, we keep the record described in section 2 for the same reason and on the same terms: we delete it if you ask us to, except the record of a request to stop, which we keep so that your request stays honored.

For Instagram, we keep two kinds of record. The record that a message arrived — the time, and nothing about who sent it — is kept for 30 days. The record used to know whether the assistant has told you it is a bot — the identifier Instagram assigns you for our account, and the related times — is also kept for 30 days after your last message. Both are then deleted automatically. We do not keep the text of Instagram messages. The record of a connected Instagram account is kept until you ask us to delete it.

7. How we protect information

The Site is served over an encrypted HTTPS connection, and we take measures we consider reasonable to protect the limited information we hold. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

8. Your choices and rights

You can ask us to review, update, or delete the information you have sent us by emailing hello@getcandorai.com.

Depending on where you live, you may have rights under laws such as the California Consumer Privacy Act, as amended (CCPA/CPRA) — for example, the right to know what personal information we hold about you, to request its deletion or correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information, and we honor these requests regardless of whether that law currently applies to us. We will not deny you service or treat you differently for exercising a privacy right. To make a request, email the address above.

9. Children

The Site is intended for business owners and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, email us and we will delete it.

10. Where this applies

Candor AI serves small businesses in Southern California, and the Site is intended for users in the United States. It is not directed to, and we do not knowingly collect personal information from, residents of the European Union, the United Kingdom, or the EEA.

11. Changes to this policy

We may update this policy from time to time. When we do, we will post the new version here and update the effective date at the top. If the changes are material, we will say so clearly on this page.

We review this policy ourselves whenever our services change, and we post each new version here. If you are an active Candor AI client when a new version is posted, we will notify you directly of the updated policy and of any updated agreement we ask you to sign — you will not be bound by a material change without being told about it.

12. Contact us

Questions about this policy or your information? Email hello@getcandorai.com.

Candor AI LLC · Pomona, California · hello@getcandorai.com